topic Re: no puedo configurar mi router cisco air-cap2602e-a-k9 in Wireless

no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Wed, 23 Oct 2024 14:28:51 GMT

Buenas

Acabo de entrar a trabajar en un colegio, el cual tiene varios problemas de red que he estado solucionando de uno en uno, acabo de llegar a dos routers que no estan completamente configurados estos dos son el mismo modelo (air-cap2602e-a-k9) o están configurados como repetidores de mi red router principal. el gran problema de esto es que mi proveedor nos entrega una cantidad limitadas de IP para poder repartir internet a lo largo del establecimiento, y el problema de routers como repetidores es que me ocupan las direcciones IP hasta que se acaban y después las siguientes personas que se quieren conectar no pueden. y no puedo acceder a la configuración de estos para realizar la configuracion LAN correspondiente.

actualmente mi red principal tiene la ip 192.168.1.99 y mi router como repetidor me da exactamente la misma ip como gateway (192.168.1.99) por lo que no puedo entrar a esa conexión como ya que me redirige a la configuracion de mi router principal. tengo que destacar que este router principal es configurado y solo tiene acceso mi proveedor de internet por lo que no puedo entrar a ese router.

estoy tratando de entrar por consola a este router pero tampoco da señales de vida.

actualmente reparten internet pero una vez se llega al tope de la IP las demas personas que se conectan ya no tendran conexión me gustaria saber si alguien me puede ayudar a solucionar este problema

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Wed, 23 Oct 2024 15:07:19 GMT

@jordan-pizarro-r

Will write in English. I see two solution for your problem. First, you talk to the ISP and ask them a wider IP range so that you dont face the lack of IP anymore. This is the easiest solution.

A more technical solution would be you to install a layer3 devicce (router or switch layer3) between the ISP´s route and your network.

Connect the ISP´s router to your router. The interface you connect your router to the ISP´s router must be in DHCP, you will now use only one IP from the ISP.

Then, you create a DHCP scope on your router and connect those Access Points to your router. This way you can manage the DHCP scope.

You may need to config NAT on your router.

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Rich R — Thu, 24 Oct 2024 18:44:30 GMT

Just to clarify: Air-CAP2602E-A-K9 is a Cisco Wireless Access Point, not a router.
If effectively works as a bridge not a router.
Your access points are probably running in autonomous mode (no Wireless LAN Controller).
It would be good to make sure the software on the APs is up to date. The latest version is 15.3(3)JF15:
https://software.cisco.com/download/home/284362257/type/284180979/release/15.3.3-JF15

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Mon, 28 Oct 2024 12:49:44 GMT

thanks for the answer, sorry for my bad english.

the first option is not posible, my isp provider just give us a few ips, so i need to configure all structure of the school network based on that, i want to tried a configure a layer 3 router for this 2 AP'S but the school is a bit rural for they don't have to much budget for spend in new routers or indumentary for this, but i want to try configure a cisco 860vae but when i try to setup that device i cannot give a ip to the gigaethernet i don't know if i'm doing something wrong or that router is not a layer 3 device

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Rich R — Mon, 28 Oct 2024 13:07:12 GMT

They are switch ports by default so you would need to configure as access mode port with a vlan assigned and then configure the SVI with IP.

interface <interface name>
description internet port
switchport access vlan 10
switchport mode access
spanning-tree portfast

interface Vlan10
description IP interface for internet
ip address 1.2.3.4 255.255.255.x

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Mon, 28 Oct 2024 13:16:49 GMT

cisco 860vae is a router and router is always layer3 device.

Can you share the "show running-config" here?

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Rich R — Mon, 28 Oct 2024 14:18:23 GMT

@Flavio Miranda most of the ISR series products (and definitely this one) have built-in switchports.
We have thousands of these routers so I am very familiar with them.
It's a layer 3 device (router) with switch ports!
If you don't believe me then read the datasheet for yourself!
https://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/data_sheet_c78-693249.html

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Mon, 28 Oct 2024 14:49:49 GMT

I don't have the device with me right now, so as soon as possible I will send here a screenshot of the running-configuration.

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Mon, 28 Oct 2024 15:09:14 GMT

Sounds good. The device is a router. So, you will have no problem configuring it. Take a close look on this link

https://www.cisco.com/c/en/us/td/docs/routers/access/800/software/configuration/guide/SCG800Guide/SCG800_Guide_BookMap_chapter_010.html

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Tue, 29 Oct 2024 21:05:11 GMT

this is the 860vae router my idea was configure this for conect the cisco air-cap2602e-a-k9. But i have some problems when i tried to give the router ip, my idea was configure the WAN port GigEth1 to mi isp provider and after configure the lan port for the two AP: my isp provider ip gateway is 192.168.1.99 i want to give the wan port for example 192.168.1.110 o just getting the ip for dhcp. and the two AP¨wired to fast0 and fast1.

i tried this configuration setup a dialer1 and give to my g1 the access to dial pool to conect the g0 to my isp provider, and give to fastEth interface access to a vlan10 but i don't get any ip from my isp to dialer and i dont get ip if i connect my to the fastEth port this configuration i see in a video: https://youtu.be/g3wAaMARb5g

now i'm reset the router for a new configuration because the last one is not working at all so, i need a little bit of help or ideas for this

PD: when i tried to give a g1(wan port) ip or just give a "no shutdown" return the message "wan interface DSL"

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Tue, 29 Oct 2024 21:39:40 GMT

Hello, ok let´s do it.

You need to use the WAN port and you are not going to use Dialler, this is for PPPoE, I dont believe this is your case.

Connect the service provide to your WAN port and use the command

conf t

interface gigabitethernet 1

media-type rj45

ip address dhcp

no shut

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Tue, 29 Oct 2024 22:53:57 GMT

okey, i'm following your steps

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Wed, 30 Oct 2024 00:14:44 GMT

you can show me how configure this like nat

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Wed, 30 Oct 2024 00:24:10 GMT

I am not sure you will need NAT.

Did the router get IP address from ISP?

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Rich R — Wed, 30 Oct 2024 00:33:03 GMT

NAT will be the only way to support more client devices on the limited ISP pool of IPs.
It will actually be PAT (NAT overload) on the WAN IP of the router.
Simple example: https://community.cisco.com/t5/routing/configure-router-for-internet-access/td-p/2898056

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Wed, 30 Oct 2024 02:04:04 GMT

yes, it is getting the ip from the isp, but my idea is to connect 2 AP(cisco air-cap2602e-a-k9) to distribute throughout the school.

I will not have problems with the current configuration?

my idea is that the APs have for example of ip 192.168.60.1 and the second one for example 192.168.70.1

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Wed, 30 Oct 2024 08:25:38 GMT

Great. It Will work as you want.

We need to creare one DHCP scope on the router and NAT

I will send you the steps

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Flavio Miranda — Wed, 30 Oct 2024 08:54:45 GMT

@jordan-pizarro-r

Apply this script and it should work. Let me know if not.

! Create DHCP scope

ip dhcp pool Internal
network 192.168.5.0 255.255.255.0
default-router 192.168.5.1
dns-server 8.8.8.8 8.8.4.4
------------------------------------------------------------
! Create ACL for NAT

ip access-list standard NAT
permit 192.168.5.0 0.0.0.255
----------------------------------------------------------------
!Create the NAT statement

ip nat inside source list NAT interface gigabitethernet1 overload
-----------------------------------------------------------------
!Add NAT to outside interface

interface gigabitethernet1

ip address dhcp

ip nat outside

no shut
----------------------------------------------------------------
!Add NAT to inside interface

interface vlan 10

ip address 192.168.5.1 255.255.255.0

ip nat inside

no shut

-------------------------------------------------------------

!Add default route on the router

no ip route 0.0.0.0 0.0.0.0 Dialer1

ip route 0.0.0.0 0.0.0.0 gigabitethernet1
----------------------------------------------------------------
!Assign the 2 APs to its respective interface

interface FastEthernet 0
description Accesss Point 1
switchport mode access
switchport access vvlan 10
!
----------------------------------------------------------------
!
interface FastEthernet 0
description Accesss Point 2
switchport mode access
switchport access vvlan 10
!
----------------------------------------------------------------

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

jordan-pizarro-r — Wed, 30 Oct 2024 13:33:05 GMT

thanks now is getting the right ip setting in the vlan i plugged to my pc to the fast0 and is getting the ip 192.168.5.2
but im not getting internet conection

Re: no puedo configurar mi router cisco air-cap2602e-a-k9

Rich R — Wed, 30 Oct 2024 14:39:02 GMT

One small mistake in Flavio's config ...
conf t
no ip route 0.0.0.0 0.0.0.0 gigabitethernet1
ip route 0.0.0.0 0.0.0.0 vlan10 192.168.1.99
end

- note you should never use a LAN (broadcast) interface as a route destination without a next hop IP address. You can only do that with point to point and dialer interfaces (dialer is a point to point PPP connection).

And if you want to give your APs IP addresses then they should be reserved in the DHCP pool:
conf t
ip dhcp excluded-address 192.168.5.0 192.168.5.3
end
Then
clear ip dhcp binding
clear arp
and on your PC
ipconfig /renew

Then you can use 192.168.5.2 and 192.168.5.3 for the APs.

For the AP configuration:
https://www.cisco.com/c/en/us/td/docs/wireless/access_point/atnms-ap-8x/configuration/guide/cg-book.html

When it's working you should see NAT translations on the router:
show ip nat trans